about summary refs log tree commit diff
path: root/pkgs/tools/networking/openssh
AgeCommit message (Collapse)AuthorFilesLines
2020-12-25openssh: fix cross-compilation after #100906Ben Wolsieffer1-1/+2
krb5-config from the host platform needs to be added to PATH so it can be run during build. This works because krb5-config is a platform independent shell-script. Before #100906, krb5-config was not used, so we didn't run into this problem.
2020-12-09Merge pull request #100906 from KAction/opensshNiklas Hambüchen1-1/+19
openssh: fix static build
2020-11-27Merge master into staging-nextFrederik Rietdijk1-1/+1
2020-11-24[staging] openssh: Fix EOF: command not foundyoctocell2-0/+24
2020-11-14openssh: fix hpn sha256SCOTT-HAMILTON1-1/+1
2020-10-29openssh: 8.3p1 -> 8.4p1Janne Heß1-5/+5
Fixes CVE-2020-15778, CVE-2020-14145
2020-10-20openssh: fix static buildDmitry Bogatov1-1/+19
2020-09-20openssh_hpn: fix sourceRyan Burns1-1/+1
2020-07-31openssh: 8.2p1 -> 8.3p1Pavol Rusnak1-9/+20
compile openssh_hpn with recent openssl
2020-06-08openssh: don’t include fido2 on muslMatthew Bauer1-1/+1
libselinux pulls in openssh transitively, so can’t use fido here Fixes #89246
2020-04-10treewide: Per RFC45, remove all unquoted URLsMichael Reilly1-1/+1
2020-02-27openssh_hpn: 7.8p1 -> 8.1p1Pavol Rusnak1-13/+4
fix build failure
2020-02-27openssh: 8.1p1 -> 8.2p1Pavol Rusnak1-4/+8
https://www.openssh.com/txt/release-8.2 add libfido2 to enable hardware tokens support added in this release
2020-01-04openssh_gssapi: fix buildMaximilian Bosch1-8/+4
Hydra build is failing[1] because of a hash-mismatch of the gss-api patch from debian. I updated the patch, and activated the `autoreconfHook` when building gss support as well, otherwise the build would fail with the following error: ``` ERROR: configure is out of date; please run autoreconf (and configure) ``` [1] https://hydra.nixos.org/build/109409845
2019-10-19openssh: don't let configure override SSH_KEYSIGNedef1-0/+2
While 9fe10288f01984963faf47e21bf1bae4d7d37962 ensured that the ssh-keysign path is searched for in PATH if not absolute, it doesn't prevent the configure script from defaulting to an absolute path in $out/libexec, making the whole effort rather pointless.
2019-10-19openssh: mark hpnSupport as brokenedef1-0/+1
We're hoping to deprecate HPN support, given that as far as we can tell, nobody is using it, and the patches seem rather unmaintained.
2019-10-19openssh: 7.9p1 -> 8.1p1Will Dietz1-7/+6
https://www.openwall.com/lists/oss-security/2019/04/18/1
2019-08-15treewide: name -> pname (easy cases) (#66585)volth1-2/+2
treewide replacement of stdenv.mkDerivation rec { name = "*-${version}"; version = "*"; to pname
2019-07-31openssh: use ssh-keysign from PATHedef2-0/+31
ssh-keysign is used for host-based authentication, and is designed to be used as SUID-root program. OpenSSH defaults to referencing it from libexec, which cannot be made SUID in Nix.
2019-01-13openssh: apply CVE-2018-20685 patchAndreas Rammhold1-0/+9
2018-11-24direnv: make cross-compile on windowsJörg Thalheim1-1/+1
2018-10-26openssh: 7.7p1 -> 7.9p1 (#48784)zimbatm2-66/+6
added openssh_gssapi to make it easier to test the patched version the HPN edition isn't available on top of 7.9p1 yet fix-host-key-algorithms-plus.patch didn't apply anymore, assuming it's fixed. release notes: https://www.openssh.com/txt/release-7.9
2018-10-08openssh: fix tunnel forwarding (upstream patch)Vladimír Čunát1-0/+7
Close #48031, fixes #48016. I didn't use the PR commit because I think it's better to fetch the patch.
2018-07-21pkgs/*: remove unreferenced function argumentsvolth1-1/+1
2018-05-23openssh: 7.6p1 -> 7.7p1Aneesh Agrawal3-24/+26
Release notes at https://www.openssh.com/txt/release-7.7; primarily bugfixes. Update ssh-hpn as well. Switch to salsa.debian.org (from anonscm.debian.org).
2018-04-07openssh_hpn: 7.5p1 -> 7.6p1Silvan Mosberger1-3/+3
2018-01-28openssh: Build with Kerberos by defaultGraham Christensen1-9/+5
This reverts commit 09696e32c390c232ec7ac506df6457fb93c1f536. which reverted f596aa0f4a35f613422f85a4486e32ea20ca7739 to move it to staging
2018-01-28Revert "openssh: Build with Kerberos by default"Graham Christensen1-5/+9
This reverts commit a232dd66ee0b390dc4d82858af7e15713bd60327. Moving to staging
2018-01-28openssh: Build with Kerberos by defaultAneesh Agrawal1-9/+5
This can be disabled with the `withKerberos` flag if desired. Make the relevant assertions lazy, so that if an overlay is used to set kerberos to null, a later override can explicitly set `withKerberos` to false. Don't build with GSSAPI by default; the patchset is large and a bit hairy, and it is reasonable to follow upstream who has not merged it in not enabling it by default.
2017-11-11Merge pull request #30137 from aneeshusa/update-openssh-to-7.6p1Orivej Desh1-6/+6
openssh: 7.5p1 -> 7.6p1
2017-10-06openssh: 7.5p1 -> 7.6p1Aneesh Agrawal1-6/+6
Release notes are available at https://www.openssh.com/txt/release-7.6. Mostly a bugfix release, no major backwards-incompatible changes.
2017-09-21misc pkgs: Basic sed to get fix `pkgconfig` and `autoreconfHook` `buildInputs`John Ericson1-1/+2
Only acts on one-line dependency lists.
2017-09-12openssh: update gssapi patchJörg Thalheim1-2/+2
2017-08-01pkgs: refactor needless quoting of homepage meta attribute (#27809)Silvan Mosberger1-1/+1
* pkgs: refactor needless quoting of homepage meta attribute A lot of packages are needlessly quoting the homepage meta attribute (about 1400, 22%), this commit refactors all of those instances. * pkgs: Fixing some links that were wrongfully unquoted in the previous commit * Fixed some instances
2017-07-21openssh: unset LDThomas Tuegel1-0/+6
Commit 093cc00cdd9d8cf31ecce5bc1dd3645c460a1b98, sets the LD environment variable by default, but this confuses the openssh Makefile because `configure' does not respect it.
2017-06-07openssh: fixup build on HydraVladimír Čunát1-0/+7
http://hydra.nixos.org/build/53993444
2017-04-14openssh_hpn: use new sources and version (7_5_P1)Tristan Helmich1-18/+13
Close #23990.
2017-04-10openssh: 7.4p1 -> 7.5p1Aneesh Agrawal1-4/+4
Release notes are available at https://www.openssh.com/txt/release-7.5. Mostly a bugfix release, no major backwards-incompatible changes. Remove deprecated `UsePrivilegeSeparation` option, which is now mandatory.
2016-12-29openssh: update the gssapi patchVladimír Čunát1-2/+4
Only building was tested.
2016-12-29Revert "Revert "openssh: security 7.3p1 -> 7.4p1""Graham Christensen3-52/+2
This reverts commit 661b5a9875cbc37310da5ee53b47a1d121bb5660.
2016-12-25Revert "openssh: security 7.3p1 -> 7.4p1"Vladimír Čunát3-2/+52
This reverts commit 277080fea0d2cf5017e4179a23e370307502c677. I had tested the server on my physical machine before pushing, but the openssh test got broken so something is clearly wrong. http://hydra.nixos.org/build/45500080
2016-12-25openssh: security 7.3p1 -> 7.4p1Vladimír Čunát3-52/+2
The two removed patches were for issues that should've been fixed. Minor vulnerabilities addressed: CVE-2016-{10009,10010,10011,10012}. https://www.openssh.com/txt/release-7.4
2016-10-20openssh: Patch CVE-2016-8858Aneesh Agrawal2-1/+13
Also add myself as a maintainer.
2016-10-06openssh: apply patch to fix https://bugzilla.redhat.com/show_bug.cgi?id=1380296Graham Christensen2-0/+38
2016-10-01treewide: Fix 'lib.optional' misusesTuomas Tynkkynen1-1/+1
These add a singleton list of a package to buildInputs.
2016-09-14openssh: update gssapi patch, fix the buildBenjamin Staffin1-2/+3
2016-08-12Merge remote-tracking branch 'upstream/master' into hardened-stdenvRobin Gloster2-31/+3
2016-08-07openssh: 7.2p2 -> 7.3p1 (#17493)Aneesh Agrawal2-31/+3
Also remove patch for CVE-2015-8325 that has been fixed upstream.
2016-07-19Merge remote-tracking branch 'upstream/master' into hardened-stdenvRobin Gloster2-5/+14
2016-07-16openssh: Use the default privilege separation dir (/var/empty)Rickard Nilsson2-5/+14
(This is a rewritten version of the reverted commit a927709a35cee56f878f0f57a932e1a6e2ebe23b, that disables the creation of /var/empty during build so that sandboxed builds also works. For more context, see https://github.com/NixOS/nixpkgs/pull/16966) If running NixOS inside a container where the host's root-owned files and directories have been mapped to some other uid (like nobody), the ssh daemon fails to start, producing this error message: fatal: /nix/store/...-openssh-7.2p2/empty must be owned by root and not group or world-writable. The reason for this is that when openssh is built, we explicitly set `--with-privsep-path=$out/empty`. This commit removes that flag which causes the default directory /var/empty to be used instead. Since NixOS' activation script correctly sets up that directory, the ssh daemon now also works within containers that have a non-root-owned nix store.
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-09-04 08:33:47 +0000